Hi
The software IRPTracker tracks IRPs for i/o devices without using filter
drivers. Does it use undocumented features of the OS or is there any other
trick to doing this monitoring so non-invasively.
Also is there a timer, meaning any IRPs generated operated and completed
within `x time units’ will not be detected.
I would like to use the results of IRP Tracker for some profiling i m doing
for my research project (non commercial). What are the licensing issues
involved therein?
With Thanks
kutty
Hi,
-
Yes, it does rely on undocumented features of the OS. It does this in
order to provide a generic filtering mechanism that can be used to track any
ol’ device in the system and also to present the user with a virgin view of
the I/O in the system. And, before anyone jumps on it, it is a completely
unsuitable filtering method for anything outside of a development support
utility. The only “non-invasive” way to do this is with a filter driver…
-
There’s no timer being used here. The time stamp that you see in the GUI
is just the system time when the IRP is seen by the driver component.
-
I’ll contact you off list.
Regards,
-scott
–
Scott Noone
Software Engineer
OSR Open Systems Resources, Inc.
http://www.osronline.com
“Kutty Banerjee” wrote in message news:xxxxx@ntdev…
> Hi
> The software IRPTracker tracks IRPs for i/o devices without using filter
> drivers. Does it use undocumented features of the OS or is there any other
> trick to doing this monitoring so non-invasively.
> Also is there a timer, meaning any IRPs generated operated and completed
> within `x time units’ will not be detected.
> I would like to use the results of IRP Tracker for some profiling i m
> doing for my research project (non commercial). What are the licensing
> issues involved therein?
>
> With Thanks
> kutty
>
>
Filter drivers are not exactly ‘non-invasive’ 
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Scott Noone
Sent: Wednesday, November 24, 2004 4:20 PM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] IRPTracker - OSR online
Hi,
-
Yes, it does rely on undocumented features of the OS. It
does this in order to provide a generic filtering mechanism
that can be used to track any ol’ device in the system and
also to present the user with a virgin view of the I/O in the
system. And, before anyone jumps on it, it is a completely
unsuitable filtering method for anything outside of a
development support utility. The only “non-invasive” way to
do this is with a filter driver…
-
There’s no timer being used here. The time stamp that you
see in the GUI is just the system time when the IRP is seen
by the driver component.
-
I’ll contact you off list.
Regards,
-scott
–
Scott Noone
Software Engineer
OSR Open Systems Resources, Inc.
http://www.osronline.com
“Kutty Banerjee” wrote in message news:xxxxx@ntdev…
> > Hi
> > The software IRPTracker tracks IRPs for i/o devices without
> using filter
> > drivers. Does it use undocumented features of the OS or is
> there any other
> > trick to doing this monitoring so non-invasively.
> > Also is there a timer, meaning any IRPs generated operated
> and completed
> > within `x time units’ will not be detected.
> > I would like to use the results of IRP Tracker for some
> profiling i m
> > doing for my research project (non commercial). What are
> the licensing
> > issues involved therein?
> >
> > With Thanks
> > kutty
> >
> >
>
>
>
> —
> Questions? First check the Kernel Driver FAQ at
> http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@hollistech.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>
I was careful to quote the word non-invasive
-scott
–
Scott Noone
Software Engineer
OSR Open Systems Resources, Inc.
http://www.osronline.com
“Mark Roddy” wrote in message news:xxxxx@ntdev…
> Filter drivers are not exactly ‘non-invasive’
>
>
>
>> -----Original Message-----
>> From: xxxxx@lists.osr.com
>> [mailto:xxxxx@lists.osr.com] On Behalf Of Scott Noone
>> Sent: Wednesday, November 24, 2004 4:20 PM
>> To: Windows System Software Devs Interest List
>> Subject: Re:[ntdev] IRPTracker - OSR online
>>
>> Hi,
>>
>> 1) Yes, it does rely on undocumented features of the OS. It
>> does this in order to provide a generic filtering mechanism
>> that can be used to track any ol’ device in the system and
>> also to present the user with a virgin view of the I/O in the
>> system. And, before anyone jumps on it, it is a completely
>> unsuitable filtering method for anything outside of a
>> development support utility. The only “non-invasive” way to
>> do this is with a filter driver…
>>
>> 2) There’s no timer being used here. The time stamp that you
>> see in the GUI is just the system time when the IRP is seen
>> by the driver component.
>>
>> 3) I’ll contact you off list.
>>
>> Regards,
>>
>> -scott
>>
>> –
>> Scott Noone
>> Software Engineer
>> OSR Open Systems Resources, Inc.
>> http://www.osronline.com
>>
>>
>> “Kutty Banerjee” wrote in message news:xxxxx@ntdev…
>> > Hi
>> > The software IRPTracker tracks IRPs for i/o devices without
>> using filter
>> > drivers. Does it use undocumented features of the OS or is
>> there any other
>> > trick to doing this monitoring so non-invasively.
>> > Also is there a timer, meaning any IRPs generated operated
>> and completed
>> > within `x time units’ will not be detected.
>> > I would like to use the results of IRP Tracker for some
>> profiling i m
>> > doing for my research project (non commercial). What are
>> the licensing
>> > issues involved therein?
>> >
>> > With Thanks
>> > kutty
>> >
>> >
>>
>>
>>
>> —
>> Questions? First check the Kernel Driver FAQ at
>> http://www.osronline.com/article.cfm?id=256
>>
>> You are currently subscribed to ntdev as: xxxxx@hollistech.com
>> To unsubscribe send a blank email to xxxxx@lists.osr.com
>>
>
>
>
>